Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/6fbd5dbc-bf32-3dd3-bc36-6f7b86dde21e.roa
File: 6fbd5dbc-bf32-3dd3-bc36-6f7b86dde21e.roa (raw, json)
Hash identifier: Mc7huL6ge8oYOlrWz5blXiu8ZsbzvhaM68rMGqGGBEg=
Subject key identifier: 1F:6F:83:D8:5A:BD:C2:6D:FB:E4:7F:50:C5:B3:61:D7:9A:FE:44:48
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F432858494B2A5C5AC7F00282F1EE04C0
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/6fbd5dbc-bf32-3dd3-bc36-6f7b86dde21e.roa
Signing time: Mon 24 Mar 2025 11:04:48 +0000
ROA not before: Mon 24 Mar 2025 11:04:48 +0000
ROA not after: Sun 22 Jun 2025 11:04:48 +0000
asID: 53388
IP address blocks: 23.128.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:2a:5c:5a:c7:f0:02:82:f1:ee:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Mar 24 11:04:48 2025 GMT
Not After : Jun 22 11:04:48 2025 GMT
Subject: CN=da37cf26-312e-4fa2-a307-2ac6d90d3011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:1d:97:49:d4:03:fc:b4:d4:b5:f5:a9:20:
4e:b2:0d:d6:be:a9:10:70:10:1f:f7:f4:df:b8:c4:
e2:99:46:21:62:77:11:3c:5d:1c:05:26:e9:b7:87:
b7:09:c9:d2:8b:5c:a4:e3:d2:12:c6:8c:c0:98:98:
fc:e6:ca:84:f9:5b:cc:b9:1e:56:96:14:2a:da:8d:
65:9d:1b:0f:4b:c9:2d:55:10:2b:08:5d:3c:7c:13:
f3:3c:6f:f0:29:d9:fb:4f:3d:f3:87:bb:80:46:3d:
7b:bb:07:ee:9a:8d:74:1c:93:cd:f3:2a:45:ad:a8:
b3:bd:2e:89:be:52:b6:40:fb:e6:0b:fa:80:be:ee:
82:b0:02:30:d9:2b:83:76:fa:37:7f:c2:6f:ef:5c:
5a:6a:8d:d8:de:3e:be:61:35:4c:cd:7f:7c:00:a6:
18:b9:cf:2f:96:ec:52:a1:9e:bd:57:85:aa:69:f9:
1d:d6:20:39:50:ee:88:f6:4e:94:43:f1:71:0d:b6:
77:91:9f:0b:6c:56:00:60:f3:96:b0:b0:76:be:50:
bb:97:43:9a:2f:c8:a0:ec:c8:c0:d0:ee:5a:60:3c:
05:5a:a7:f5:16:69:2c:b6:85:7c:c4:08:18:92:6b:
2b:e3:db:56:16:55:b1:b4:ff:be:f4:d2:d6:e1:f3:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:83:D8:5A:BD:C2:6D:FB:E4:7F:50:C5:B3:61:D7:9A:FE:44:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/6fbd5dbc-bf32-3dd3-bc36-6f7b86dde21e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:db:42:d5:92:67:cf:9e:9e:e6:c8:b0:27:8b:01:b4:9e:a7:
bc:aa:53:02:83:c1:57:cb:04:10:a3:d3:2e:d5:01:29:18:ab:
30:ab:79:fa:17:43:7e:73:f1:1f:4f:46:ec:65:04:a4:e2:74:
a2:d8:c4:93:8d:b0:54:0b:46:bb:c1:ed:85:1a:5c:f7:65:bb:
e6:14:71:b2:d8:7a:ea:aa:11:35:2d:63:81:11:ff:6b:03:c9:
09:99:de:67:e5:1a:c0:0d:b6:cc:7e:29:d1:26:8f:3f:49:0c:
24:f4:8d:de:82:67:a6:1b:84:54:69:ea:a2:1f:c5:56:4c:84:
ed:59:b1:a9:71:b8:41:5a:13:7c:35:6f:6c:56:5b:18:44:bd:
3f:63:97:43:68:c5:44:ed:aa:88:ea:87:9a:dc:49:57:ba:6b:
88:b4:8a:b8:b3:1b:74:7c:2a:47:5c:b0:4e:90:44:fd:96:22:
2b:8f:84:bf:25:43:34:86:70:5e:50:dc:8c:45:42:ee:5f:90:
50:15:4e:e3:d9:29:58:2b:a0:a9:9e:45:2b:74:d0:91:2b:89:
52:e3:1c:4c:15:3d:c5:33:f6:8c:e5:65:f5:56:94:e1:a7:37:
5c:91:f8:10:fe:e1:25:d4:70:b3:4d:d7:9a:7a:30:a9:f3:4b:
54:69:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:32 2025 by rpki-client